too bad google still cant translate this forum. nice move, kudos to memset. this will push the chdk-dslr development farther, and i seriously have to reconsider my "Coders Humiliate DSLR Kiddies" slogan soon

is it dryos (or better: CryOS ) ? can they be loaded into IDA using the usual way? i guess not, at least applying the signatures and the like does not work, eh? afaik in the other dslrs dumps there were no functionnames, if i remember correctly.

then at F801000C it looks like initialisation, but this "LDR PC" jump to some wrong place. Does anybody have clue if it IDa's wrong interpretation, or its dump with errors, or somthing else ? this LDR PC's instructions are also used in other places of code.

I'm close to 1000 named functions in IDA, though this is less than 10% of all functions in ROM0. It's long and dull but straightforward. I'll post a map file people can apply to their IDA projects when I've done the obvious stuff. Otherwise we repeat a lot of work.

I was under the impression that the ROM on these systems was at the end of memory so when I found some hardcoded references that didn't work I gave up on 0xF8000000 and reloaded ROM0 at 0xFF800000. I did a hunt for the ARM reset vector at 0xFFFF0000 (alternative to 0x0) and there is a plausable jump leading to configuration code in an area that claims to be the bootloader at the end of ROM0.